Technical Information
- %TEMP%\todjodktll1
- %TEMP%\todjodktll2
- %TEMP%\todjodktll3
- http://li###riyou.cn/9y878hi?To###################
- http://ku####ka-ryaba.ru/9y878hi?To###################
- http://lv###xis.com/9y878hi?To###################
- DNS ASK li###riyou.cn
- DNS ASK ku####ka-ryaba.ru
- DNS ASK lv###xis.com
- DNS ASK ti###tawgi.com
- DNS ASK oo###heol.net